Privacy Policy

Effective date: June 6, 2026  ·  Last updated: June 6, 2026

This Privacy Policy explains how Affitrage Ltd, operating the AADOPS platform ("we", "us"), collects, uses, stores, and protects your personal data. It complies with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023. By registering or using the Platform, you consent to the practices described here.

1. Data Controller

Affitrage Ltd is the data controller for personal data collected through AADOPS. Contact us at support@aadops.com. We are based in Port Harcourt, Rivers State, Nigeria.

2. What Data We Collect

Registration data: Business name, full name, email address, password (stored as a cryptographic hash, never in plain text), and business type.

Business profile data: Store name, location, bank account details for marketplace disbursements, and business description.

Verification data (KYC/KYB): NIN for individual verification; CAC registration number, business documents, and director information for business verification. Collected only from users accessing marketplace selling features.

Transaction data: Records of sales, purchases, marketplace orders, payments, and escrow transactions.

Operational data: Inventory records, product listings, farm records, production records, delivery records, and consumption records you create on the Platform.

Usage data: IP address, browser type, pages visited, features used, and timestamps. Collected automatically when you use the Platform.

Communications: Messages sent to AADOPS support, including content and metadata.

3. How We Use Your Data

• To provide the Platform: Operating your account, processing transactions, managing subscriptions, and delivering all Platform features.
• To process payments: Passing necessary payment data to Flutterwave to process subscription charges and marketplace escrow payments on behalf of Affitrage Ltd.
• To verify identity: Processing KYC and KYB verification to comply with financial regulations and protect marketplace participants from fraud.
• To communicate with you: Sending transactional emails such as order confirmations, payment receipts, verification updates, and account alerts. We do not send marketing emails without your explicit consent.
• To improve the Platform: Analysing anonymised and aggregated usage data. This analysis does not identify individual users.
• To comply with the law: Meeting obligations under Nigerian financial regulations, tax law, anti-money-laundering requirements, and lawful orders from competent authorities.
• To protect the Platform: Detecting and preventing fraud, abuse, and security incidents.

4. Legal Basis for Processing

• Contract: Processing necessary to provide the Platform and fulfil our Terms of Service.
• Legal obligation: Processing required to comply with Nigerian law including financial regulations and tax obligations.
• Consent: Where we ask for consent for a specific purpose such as verification document processing. You may withdraw consent at any time by contacting support@aadops.com.
• Legitimate interests: Platform security, fraud prevention, and anonymised analytics, where not overridden by your rights.

5. Who We Share Your Data With

We do not sell your personal data. We share data only as follows:

Flutterwave: Payment data shared to process subscription payments and marketplace escrow transactions.

Amazon Web Services (AWS): Uploaded files stored on AWS S3 infrastructure. AWS acts as a data processor under our instruction.

Verification partners: KYC and KYB data processed by authorised identity verification services bound by confidentiality obligations.

Marketplace counterparties: Your business name, location (state and LGA), and contact information may be visible to your transaction counterparty to facilitate the transaction.

Legal authorities: Data disclosed to Nigerian regulatory authorities, law enforcement, or courts if required by law or a valid court order.

All third parties processing data on our behalf handle it in accordance with applicable data protection law and our data processing agreements.

6. Data Storage and Security

Your data is stored on servers accessible from Nigeria and on AWS infrastructure. We implement: passwords stored as bcrypt hashes; HTTPS/TLS encryption for all data in transit; verification documents in private S3 buckets with restricted access; role-based access controls; and regular security monitoring.

In the event of a data breach likely to result in risk to your rights, we will notify you and the Nigeria Data Protection Commission (NDPC) as required by the NDPR.

7. Data Retention

• Account data: Duration of account plus 7 years after closure (Nigerian tax law requirement)
• Transaction records: 7 years from the date of transaction
• Verification documents: 5 years from submission or account closure, whichever is later
• Usage logs: 12 months
• Support communications: 3 years

After the applicable retention period, data is securely deleted or anonymised.

8. Your Rights Under the NDPR and NDPA

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion where we no longer have a lawful basis to retain it
• Right to restriction: Request that we restrict processing in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is consent-based

To exercise any right, email support@aadops.com with subject "Data Rights Request". We respond within 30 days. We may verify your identity before processing the request.

If you believe your rights have been violated, lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

9. Cookies

AADOPS uses session cookies to maintain your login state and Platform preferences. We do not use tracking, advertising, or cross-site tracking cookies. Disabling session cookies will prevent you from logging into the Platform.

10. Children's Privacy

AADOPS is intended for adults operating businesses. We do not knowingly collect data from individuals under 18. If we become aware a minor has registered, we will delete their data promptly. Contact support@aadops.com if you believe a minor has registered.

11. Changes to This Policy

Changes are communicated by email before taking effect. Continued use constitutes acceptance.

12. Contact

Affitrage Ltd (trading as AADOPS) — Data Protection
Port Harcourt, Rivers State, Nigeria
Email: support@aadops.com